On Thu, 7 Apr 2005, Russell Fulton wrote: > I am seeing packets being dropped by pf that should not traverse the > bridge at all (i.e. packets between hosts that are on the same side of > the bridge). After a little thought I came to the conclusion that this > is quite plausible since the filtering is taking place on the interface > closest to the affected hosts and the packets are hitting pf before they > get to the bridging logic.
No, bridging comes first. And yes, the packet _should_ be dropped when the destination interface (according to the bridgecache) is the same as the source interface of the packet.
